[Declude.JunkMail] INVURIBL WEIGHT?
Hi everyone, I would appreciate hearing some opinions. How heavy are you weighing INVURIBL? Would half of the hold weight be too much weight? Would you hold on INVURIBL alone? Thanks, Dave No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 269.23.2/1389 - Release Date: 4/21/2008 8:34 AM --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] No Reverse DNS pointer?
Hi Everyone, I have two questions: 1) If a mail server is configured without a reverse DNS pointer, is that enough to prevent email from reaching AOL, Yahoo, Hotmail, etc? 2) Do you block email coming from mail servers with no reverse DNS? Thanks, Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] INVURIBL WEIGHT?
I hold on invURIBL alone. Dan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Tuesday, April 22, 2008 7:56 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] INVURIBL WEIGHT? Hi everyone, I would appreciate hearing some opinions. How heavy are you weighing INVURIBL? Would half of the hold weight be too much weight? Would you hold on INVURIBL alone? Thanks, Dave No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 269.23.2/1389 - Release Date: 4/21/2008 8:34 AM --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. The information contained in this communication is privileged and confidential. If you have received this communication in error, please forward back to the sender and delete your copy immediately. You are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] No Reverse DNS pointer?
1. Yes - per AOL SMTP header. 2. Yes. But if it the sending host has any pointer (match or not) then pass. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Tuesday, April 22, 2008 9:23 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] No Reverse DNS pointer? Hi Everyone, I have two questions: 1) If a mail server is configured without a reverse DNS pointer, is that enough to prevent email from reaching AOL, Yahoo, Hotmail, etc? 2) Do you block email coming from mail servers with no reverse DNS? Thanks, Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
Don't know if Declude (or anyone) can help, but we are seeing a L O T of bounce-backs that show that the SPAMMERS are using valid postmaster@domain (that we host) as their FROM address and send the SPAM out thru Post Offices other than ours. When the SPAM goes to a non-existant address, it bounces back to the valid postmaster@domain on my Server. We are getting 5,000 - 10,000 of these bounces per day.. Any suggestions? Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
This is known as backscatter you can read about it here. http://www.spamresource.com/2007/02/backscatter-what-is-it-how-do-i-stop-it. html If you go to the Declude My Account home page you will find a link to download a zip file which contains 2 filters you can use against backscatter. Download these and extract them to your \declude\filters folder and then call the filters from your global.cfg to be aggressive score the FILTER-NOSENDER with 10 or more points. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Tuesday, April 22, 2008 11:22 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email Importance: High Don't know if Declude (or anyone) can help, but we are seeing a L O T of bounce-backs that show that the SPAMMERS are using valid postmaster@ mailto:[EMAIL PROTECTED] domain (that we host) as their FROM address and send the SPAM out thru Post Offices other than ours. When the SPAM goes to a non-existant address, it bounces back to the valid postmaster@ mailto:[EMAIL PROTECTED] domain on my Server. We are getting 5,000 - 10,000 of these bounces per day.. Any suggestions? Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
Hi Ferrell, Its called backscatter. I had to post some info about it on my site for my own clients. Feel free to copy it. http://www.123marbella.net/kb.html#6 I am currently looking at alligate gateway in order to add some added protection to my mail network. However, declude does have a filter for this and i did install it and no one has really complained since then so it may have worked. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: 22 April 2008 17:22 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email Importance: High Don't know if Declude (or anyone) can help, but we are seeing a L O T of bounce-backs that show that the SPAMMERS are using valid postmaster@ mailto:[EMAIL PROTECTED] domain (that we host) as their FROM address and send the SPAM out thru Post Offices other than ours. When the SPAM goes to a non-existant address, it bounces back to the valid postmaster@ mailto:[EMAIL PROTECTED] domain on my Server. We are getting 5,000 - 10,000 of these bounces per day.. Any suggestions? Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
David, I have Junkmail Pro... can I use the NOSENDER filter? If so, where can I find it? Thanks, E. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, April 22, 2008 11:32 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email This is known as backscatter you can read about it here. http://www.spamresource.com/2007/02/backscatter-what-is-it-how-do-i-stop-it. html If you go to the Declude My Account home page you will find a link to download a zip file which contains 2 filters you can use against backscatter. Download these and extract them to your \declude\filters folder and then call the filters from your global.cfg to be aggressive score the FILTER-NOSENDER with 10 or more points. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Tuesday, April 22, 2008 11:22 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email Importance: High Don't know if Declude (or anyone) can help, but we are seeing a L O T of bounce-backs that show that the SPAMMERS are using valid postmaster@ mailto:[EMAIL PROTECTED] domain (that we host) as their FROM address and send the SPAM out thru Post Offices other than ours. When the SPAM goes to a non-existant address, it bounces back to the valid postmaster@ mailto:[EMAIL PROTECTED] domain on my Server. We are getting 5,000 - 10,000 of these bounces per day.. Any suggestions? Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] INVURIBL WEIGHT?
Hi, I score it at 25% of my hold weight. A mail may contain a bad link for what ever reason. I might increase this in the near future but never more then 50%. I would never hold on any one test, that's the power of Declude. Having said that, I do hold on certain Sniffer results alone like porn. Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hotelmanagement en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 [EMAIL PROTECTED] / www.tio.nl - Original Message - From: Dave Beckstrom To: declude.junkmail@declude.com Sent: Tuesday, April 22, 2008 3:55 PM Subject: [Declude.JunkMail] INVURIBL WEIGHT? Hi everyone, I would appreciate hearing some opinions. How heavy are you weighing INVURIBL? Would half of the hold weight be too much weight? Would you hold on INVURIBL alone? Thanks, Dave No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 269.23.2/1389 - Release Date: 4/21/2008 8:34 AM --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
David, I never added your backscatter, should I do it. What does it do exactly. Stephan _ De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de David Barker Envoyé : 22 avril, 2008 11:32 À : declude.junkmail@declude.com Objet : RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email This is known as backscatter you can read about it here. http://www.spamresource.com/2007/02/backscatter-what-is-it-how-do-i-stop-it. html If you go to the Declude My Account home page you will find a link to download a zip file which contains 2 filters you can use against backscatter. Download these and extract them to your \declude\filters folder and then call the filters from your global.cfg to be aggressive score the FILTER-NOSENDER with 10 or more points. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Tuesday, April 22, 2008 11:22 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email Importance: High Don't know if Declude (or anyone) can help, but we are seeing a L O T of bounce-backs that show that the SPAMMERS are using valid postmaster@ mailto:[EMAIL PROTECTED] domain (that we host) as their FROM address and send the SPAM out thru Post Offices other than ours. When the SPAM goes to a non-existant address, it bounces back to the valid postmaster@ mailto:[EMAIL PROTECTED] domain on my Server. We are getting 5,000 - 10,000 of these bounces per day.. Any suggestions? Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
FILTER-NOSENDER is used to see if it is an automated message/response from a server. If the message triggers FILTER-NOSENDER we then go onto use FILTER-BACKSCATTER to score on phrases within the content. Also in the FILTER-BACKSCATTER there is a condition that if your server IP is found in the body of the bounced message we can assume the original message was from your server and therefore the FILTER-BACKSCATTER should not be run this is to help reduce false positives. David B From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephan Chayer Sent: Tuesday, April 22, 2008 12:52 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email David, I never added your backscatter, should I do it. What does it do exactly. Stephan _ De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de David Barker Envoyé : 22 avril, 2008 11:32 À : declude.junkmail@declude.com Objet : RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email This is known as backscatter you can read about it here. http://www.spamresource.com/2007/02/backscatter-what-is-it-how-do-i-stop-it. html If you go to the Declude My Account home page you will find a link to download a zip file which contains 2 filters you can use against backscatter. Download these and extract them to your \declude\filters folder and then call the filters from your global.cfg to be aggressive score the FILTER-NOSENDER with 10 or more points. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Tuesday, April 22, 2008 11:22 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email Importance: High Don't know if Declude (or anyone) can help, but we are seeing a L O T of bounce-backs that show that the SPAMMERS are using valid postmaster@ mailto:[EMAIL PROTECTED] domain (that we host) as their FROM address and send the SPAM out thru Post Offices other than ours. When the SPAM goes to a non-existant address, it bounces back to the valid postmaster@ mailto:[EMAIL PROTECTED] domain on my Server. We are getting 5,000 - 10,000 of these bounces per day.. Any suggestions? Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: alligate
Hi All, I have installed alligate on a new dedicated server and configured everything by the looks of it. Does anyone know what DNS settings I need to make on my domain and what I need to change on my IMAIL server? I sent a support ticket to alligate about 10 seconds ago but am itching to get it working and wondered if anyone here knew. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: alligate
Your MX record should be changed to the new Alligate IP address. Alligate will send mail to imail server No change needed in Imail as far as I recall Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, April 22, 2008 2:58 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: alligate Hi All, I have installed alligate on a new dedicated server and configured everything by the looks of it. Does anyone know what DNS settings I need to make on my domain and what I need to change on my IMAIL server? I sent a support ticket to alligate about 10 seconds ago but am itching to get it working and wondered if anyone here knew. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: alligate
Hi Harry, Thanks for that. I will try it! Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: 22 April 2008 21:12 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: alligate Your MX record should be changed to the new Alligate IP address. Alligate will send mail to imail server No change needed in Imail as far as I recall Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, April 22, 2008 2:58 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: alligate Hi All, I have installed alligate on a new dedicated server and configured everything by the looks of it. Does anyone know what DNS settings I need to make on my domain and what I need to change on my IMAIL server? I sent a support ticket to alligate about 10 seconds ago but am itching to get it working and wondered if anyone here knew. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: alligate
Point your mx record to your new serverlike MX 10 gateway.123marbella.net. Then point gateway.123marbella.net. to the IP address of your new alligate server. Imail should not need any changes. To really tighten things up have your users authenticate on port 587 and block all IPs to port 25 except for your alligate server. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com _ F rom: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, April 22, 2008 12:58 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: alligate Hi All, I have installed alligate on a new dedicated server and configured everything by the looks of it. Does anyone know what DNS settings I need to make on my domain and what I need to change on my IMAIL server? I sent a support ticket to alligate about 10 seconds ago but am itching to get it working and wondered if anyone here knew. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] No Reverse DNS pointer?
1) If a mail server is configured without a reverse DNS pointer, is enough to prevent email from reaching AOL, Yahoo, Hotmail, etc? AOL indicates they will do this, on occasion I have seen this, but not all the time. 2) Do you block email coming from mail servers with no reverse DNS? No, but I do apply a small amount of weight to it. If you did an outright block you would end up blocking a lot of legit mail. Darfrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Dave Beckstrom wrote: Hi Everyone, I have two questions: 1) If a mail server is configured without a reverse DNS pointer, is that enough to prevent email from reaching AOL, Yahoo, Hotmail, etc? 2) Do you block email coming from mail servers with no reverse DNS? Thanks, Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
